Wind River Support Network

HomeDefectsLIN1019-10624

Acknowledged

LIN1019-10624 : Security Advisory - linux-firmware - CVE-2023-20592

Created: Nov 15, 2023 Updated: Nov 29, 2023

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.














CREATE(Triage):(User=admin) CVE-2023-20592 (https://nvd.nist.gov/vuln/detail/CVE-2023-20592)